Last updated: 27 July 2026.
1. Data controller
The controller of personal data submitted through WycieczkiZakopane.pl is “Stemer” Kamil Stemerowicz, Polish tax ID (NIP) 5992738874, trading under the STEMER Travel brand. For privacy matters, email kontakt@stemer.eu or call +48 883 134 071.
2. Data we process
An enquiry may include your name, telephone number or email address, preferred date, number of travellers, the trip concerned and your message. The server may also record basic technical data such as an IP address, connection time, browser type and information required to keep the website secure.
3. Purposes and legal bases
- replying to an enquiry, checking availability and preparing an offer — Article 6(1)(b) GDPR, steps taken at your request before entering into a contract,
- protecting the website, maintaining reliable communication and establishing or defending legal claims — Article 6(1)(f) GDPR, the controller’s legitimate interests,
- contact based on consent where separate, voluntary consent is requested — Article 6(1)(a) GDPR.
4. Recipients
Data may be entrusted to providers of hosting, email, IT support and website security. Where necessary to handle a specific enquiry or booking, relevant details may also be shared with an entity involved in delivering the selected service. Personal data is not sold. Recipients act under applicable law, a suitable agreement or the controller’s documented instructions.
5. Transfers outside the EEA
Contact-form data is generally handled within the European Economic Area. If a technical provider processes data outside the EEA, a transfer may take place only under a safeguard permitted by the GDPR, such as an adequacy decision or Standard Contractual Clauses.
6. Retention
Enquiry data is kept for as long as needed to respond and then for no longer than 12 months, unless a booking or contract follows, the law requires longer retention, or the information is needed to establish, pursue or defend a claim. Technical logs are retained only for the period needed for security and diagnostics.
7. Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, portability or object to processing. You may withdraw consent at any time without affecting processing already carried out lawfully. Send a request to kontakt@stemer.eu. You also have the right to lodge a complaint with the Polish President of the Personal Data Protection Office or the competent supervisory authority in your country.
8. Voluntary submission
Providing data is voluntary, but without contact details and enough information about the enquiry, a reply may not be possible. Data is not used for automated decision-making or profiling that produces legal or similarly significant effects.
9. Cookies
The website may use strictly necessary cookies to remember the selected language, operate the enquiry form and protect the service. If analytics or marketing tools requiring consent are introduced, you will be offered a choice before they are activated and this policy will be updated.
10. Changes
This policy may change when the website, its providers or the law changes. The current version and its latest update date will always be published on this page.